Critical VMware Workstation and Fusion Flaw Lets VM Admins Execute Host Code

Broadcom has released security updates for two security flaws impacting VMware Workstation and Fusion, including one critical bug that could result in arbitrary code execution under certain conditions. The vulnerability, tracked as CVE-2026-59346 CVSS score: 9.3, is an integer-overflow...

rejjeto_hfs-rce-exploit-cve-2014-6287

HFS Remote Command Execution Exploit CVE-2014-6287 This is a Python 3 rewrite of the classic Remote Command Execution RCE exploit targeting Rejetto HTTP File Server HFS v2.3.x , leveraging the vulnerability identified as CVE-2014-6287. Originally discovered by Avinash Kumar Thapa aka "-Acid" , th...

CVE-2024-32113-Exploit

CVE-2024-32113 Exploit Apache OFBiz Path Traversal to RCE exploit. Description CVE-2024-32113 is a Path Traversal vulnerability that leads to Remote Code Execution RCE in Apache OFBiz. Vulnerability : Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in...

SQLPad-6.10.0-Exploit-CVE-2022-0944

SQLPad 6.10.0 Exploit CVE-2022-0944 This Bash script exploits an RCE vulnerability in SQLPad 6.10.0, allowing an attacker to achieve remote code execution RCE by abusing the host and database fields in SQLPad’s MySQL database connection settings. The exploit leverages SQLPad’s unsanitized handlin...

CVE-2025-55182

CVE-2025-55182 - React2Shell PoC A proof of concept exploit for CVE-2025-55182, a critical CVSS 10.0 unauthenticated remote code execution vulnerability in React Server Components. Credit Discovered byLachlan Davidson - Disclosed to Meta/React team on November 29, 2025. Vulnerability Overview The...

CVE-2020-10130

CVE-2020-10130 - El producto SearchBlox anterior a V-9.1 es vulnerable a la omisión de lógica de negocio Descripción del producto: SearchBlox simplifica la búsqueda empresarial para organizaciones complejas. Las herramientas intuitivas e inteligentes de SearchBlox ofrecen configuración lista para...

RCE-Cacti-1.2.22

RCE-Cacti-1.2.22 Este es un código del exploit CVE-2022-46169, que recree utilizando Python3! Si por ahí estás haciendo una máquina de HTB, esto te puede ser útil... 🤞✨...

CVE-2024-7627

Exploit for CVE-2024-7627 — Bit File Manager WordPress Unauthenticated RCE Exploit 📌 Description This repository contains a proof-of-concept PoC exploit for CVE-2024-7627 , a critical Unauthenticated Remote Code Execution RCE vulnerability in the Bit File Manager WordPress plugin versions 6.0 –...

CVE-2026-46331-pedit-cow

CVE-2026-46331-pedit-cow Write-up and exploitation steps for the pedit COW vulnerability CVE-2026-46331. Overview This challenge demonstrates pedit COW, a Linux kernel flaw in the traffic-control subsystem's packet-editing action actpedit. The vulnerability allows an unprivileged user to overwrit...

CVE-2025-55182

CVE-2025-55182 Proof of concept exploit for CVE-2025-55182. When successful, it will emulate a shell on the remote target over HTTP-POST requests. Works with both HTTP and HTTPS, but skips any certificate checks. Only supports directory changes with absolute paths. How to use 1. Set up the...

CVE-2019-11224

Modero AMX Code Execution CVE-2019-11224 This repo contains a few sources about CVE-2019–11224 https://link.medium.com/zukA0oCnV8 because I noticed that the link no longer works on the official NIST website. Modero AMX devices are essentially touch panel devices for meeting rooms, they can be...

CVE-2019-18935

CVE-2019-18935 Exploit Remote Code Execution exploit for Telerik UI ASP.NET AJAX through deserialization vulnerability. How to Run Step 1: Clone the Project root@kitploit: git clone https://github.com/menashe12346/CVE-2019-18935.git cd CVE-2019-18935 Step 2: In CVE-2019-18935.py, modify line 15:...

CVE-2025-31324

CVE-2025-31324 Proof-of-Concept 0day for SAP NetWeaver created by ShinyHunters CVE-2025-31324 is a critical "Unrestricted File Upload" vulnerability affecting the SAP NetWeaver Application Server AS Java. Specifically, it resides within the Visual Composer component VCFRAMEWORK. The flaw allows a...

CVE-2023-23488-PoC

CVE-2023-23488-PoC Unauthenticated SQL Injection - Paid Memberships Pro 2.9.8 WordPress Plugin Running this script against a WordPress instance with Paid Membership Pro plugin tells you if the target is vulnerable. As the SQL injection technique required to exploit it is Time-based blind, instead...

CVE-2024-23692

CVE-2024-23692 - Rejetto HFS Remote Code Execution RCE A tactical documentation and exploit guide for CVE-2024-23692 , an unauthenticated critical Remote Code Execution RCE vulnerability affecting Rejetto HTTP File Server HFS versions prior to 2.3m. This guide leverages an In-Memory Reverse Shell...

CVE-2026-19745

Introduction Hi everyone, back in May I found decent vulnerablities in my router, today I can finally show everyone! Both vulnerablities in this repo are authenticated Denial of Service vulnerablities! I do not know the exact techial details of how or why these vulnerablities work, we never got a...

CVE-2019-9053

CVE-2019-9053 Exploit - CMS Made Simple Unauthenticated SQL Injection SQLi An exploit script for CVE-2019-9053 , a critical unauthenticated SQL injection SQLi vulnerability in CMS Made Simple versions 2.2.9 and below. This tool leverages time-based SQL injection to extract admin credentials...

CVE-2023-47179

CVE-2023-47179 WooODT Lite = 2.4.6 - Missing Authorization to Arbitrary Options Update Subscriber+ Description: The WooODT Lite plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the byconsolewooodtadminfieldssettingfiles function hooked v...

Detecting-and-Analyzing-CVE-2024-24919-Exploitation

🔍 Investigating a Zero-Day Attack Using Let’s Defend SIEM 👉 A Walkthrough on Detecting and Analyzing CVE-2024-24919 Exploitation 🎯 Purpose of the Investigation This project was conducted to investigate a potential exploitation attempt against a Check Point Security Gateway, specifically leveragin...

CVE-2025-32463-Sudo-Chroot-Escape

CVE-2025-32463-Sudo-Chroot-Escape Descripción Este repositorio contiene una Prueba de Concepto PoC basada en Python para CVE-2025-32463, una vulnerabilidad de escalada de privilegios local en las versiones de sudo 1.9.14 a 1.9.17. Cuando un usuario tiene privilegios de sudo para ejecutar un coman...